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III. DETAILED ACTION 

Response to Amendment 

1. Claims 1-55 are presented for examination. 

Claim Rejections - 35 USC §103 

2. The following is a quotation of 35 U.S.C. 103(a) which 
forms the basis for all obviousness rejections set forth in 
this Office action: 

A patent may not be obtained though the invention is not identically 
disclosed or described as set forth in section 102 of this title, if 
the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have 
been obvious at the time the invention was made to a person having 
ordinary skill in the art to which the subject matter pertains. 
Patentability shall not be negatived by the manner in which the 
invention was made. 

3. Claims 1-7, 9-18, 22-28, 30-40, 44-49 and 51-55 are 
rejected under 35 U.S.C. 103(a) as being unpatentable over 
Kennedy et al. (U.S. Patent 6,651,217) in view of Kawasaki 
(U.S. Patent 6,539,375) . 

As to Claim 1, Kennedy et al. discloses a method of 
managing meta data in a computing device, the method 
comprising the steps of: 

collecting meta data resulting from use of the 
computing device, the metadata comprising application data 
usable in an application (storing into a profile data 
values entered on a form on the basis of labels associated 
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with fields on the form) (col. 3, lines 1-5) and a context 
data for identifying context in which the application data 
are used (col. 5, lines 43-53). 

storing the meta data and the statistical information 
in a storage of the computing device (i.e. the profile, 
which is stored for future use) (see abstract) / and 

retrieving, from the storage (i.e. a previously stored 
data value is retrieved from the user profile) (col. 11, 
lines 10-13) , application data that would be most 
appropriate for a current context of using the application 
based on the context data (fig. 5) and the statistical 
information (col. 5, lines 30-34) and 

Kennedy et al. does not teach determining statistical 
information associated with the meta data, the statistical 
information indicating relationships between the meta data. 

Kawasaki teaches determining statistical information 
associated with the meta data, the statistical information 
indicating relationships between the meta data (i.e. 
collecting representative data sets of major areas of 
interests and processing the data sets by algorithms and 
weighted rules to form a recognizer) (col. 3, lines 4-16). 
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Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention 
was made to have modified Kennedy et al . wherein the 
determining statistical information associated with the 
meta data, the statistical information indicating 
relationships between the meta data. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al . by the teaching of Kawasaki because 
providing the determining statistical information 
associated with the meta data, the statistical information 
indicating relationships between the meta data allows 
reduced inaccurate, misleading or obsolete preferences, 
which may causing a mismatch between actual User interests 
and the information captured in manual preferences systems 
as taught by Kawasaki (col. 2, lines 35-45) . 

As to Claim 2, Kennedy et al . as modified teaches a 
method further comprising the step of: 

applying the retrieved application data in the current 
context ( Kennedy et al. Fig. 2-3 and col. 5, lines 43-53). 



As to Claim 3, Kennedy et al . as modified teaches a 
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method wherein 

the context data identify at least one of the 
following: user roles, uniform resource identifiers (URls) , 
file names, and/or form names pertaining to the application 
data ( Kennedy et al. Fig, 2-3 and col . 5, lines 43-53). 

As to Claim 4, Kennedy et al . as modified teaches a 
method wherein the application data comprise at least one 
of the following: 

page display setting data, file display setting data, 
user ID/password combinations, user's preference data, 
bookmarks, and authentication data (i.e. passwords) ( Kennedy 
et al . Fig. 6 and col. 8, lines 36-45). 

As to Claim 5, Kennedy et al . as modified teaches a 
method wherein the authentication data comprise at least 
one of the following: 

certificates, or public keys (i.e. For additional 
security purposes, the values in data store 2 06 could be 
stored in encrypted form in a protected area in client 
computer) ( Kennedy et al. col. 7, lines 47-50) . 



As to Claim 6, Kennedy et al . as modified teaches a 
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method wherein the authentication data include at least one 
of the following: 

wherein the metadata are stored in (key, value) pairs, 
(i.e. the values can be correlated or combined with data 
from other sources, such as values used by the profile 
assistant) ( Kennedy et al . col. 7, lines 50-55). 

As to Claim 7, Kennedy et al . as modified teaches a 
method wherein 

the statistical information indicates frequencies in 
which particular application data are used together in 
particular contexts (i.e. frequency of encounter 
) ( Kawasaki col. 3, lines 4-16) . 

As to Claim 9, Kennedy et al . as modified teaches a 
method wherein the current context comprises at least one 
of the following: 

opening a web page, filling in a computer form, 
filling in a password changing form, providing a 
certificate, opening a computer file, or processing a 
computer file, or executing an application program ( Kennedy 
et al . Fig. 6 and col. 8, lines 36-45) . 
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As to Claim 10, Kennedy et al. as modified teaches a 
method further comprising the step of: 

providing a graphical user interface (GUI) for 
allowing the user to organize the stored meta data ( Kennedy 
et al. Fig. 6 and col. 8, lines 36-45) . 

As to Claim 11, Kennedy et al . as modified teaches a 
method wherein 

the GUI displays a graphical tool in a cylindrical 
configuration for organizing the stored meta data ( Kennedy 
et al. Fig. 6) . 

As to Claim 12, Kennedy et al . as modified teaches a 
method wherein 

retrieving, from the storage, application data that 
would be most appropriate for a current context of using 
the application based on the context data and the 
statistical information is performed using heuristics 
algorithms (i.e. a heuristics function can also be 
provided) ( Kennedy et al. col. 7, lines 29-35). 



As to Claim 13, Kennedy et al . as modified teaches a 
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method wherein retrieving, from the storage, application 
data that would be most appropriate for a current context 

of using the application based on the context data and the 

1 

statistical information of: 

formulating search requirements based on the current 
context of using the application (i.e. search) ( Kennedy et 
al . Fig. 6-7) ; and 

executing a search based on the search requirements 
(i.e. search) ( Kennedy et al . Fig. 6-7) . 

As to Claim 14, the teachings of Kennedy et al . as 
modified has been discussed above, Kennedy et al . as 
modified does not teach the search requirements specify 
weighted properties of the current context of using the 
application. 

Kawasaki teaches the search requirements specify 
weighted properties of the current context of using the 
application (i.e. collecting representative data sets of 
major areas of interests and processing the data sets by 
algorithms and weighted rules to form a recognizer) 
(Kawasaki col. 3, lines 4-16) 



As to Claim 15, Kennedy et al . as modified teaches a 
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method further comprising: 

applying the retrieved application data in the current 
context (i.e. passwords) ( Kennedy et al . Fig. 6-7 and col. 
8, lines 36-45); and 

applying predetermined application data in the current 
context if no such most appropriate application data are 
retrieved in the retrieving step ( Kennedy et al . Fig. 6-7 
and col. 8, lines 36-45). 

As to Claim 16, Kennedy et al . as modified teaches a 
method wherein the current context is for filling in a 
computer form, and the method comprises: 

automatically filling in the computer form with the 
most appropriate application data (i.e. Thus has been 
described a method and apparatus for automatically 
populating a form comprising a plurality of fields) ( Kennedy 
et al. Fig. 6-7 and col. 14, lines 52-55). 

As to Claim 17, Kennedy et al. as modified teaches a 
method further comprising: 

retrieving, from the storage, alternative application 
data that are related to the current context of filling in 
the computer form (i.e. the user has the option of entering 
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information for other fields for which no match was 
found) ( Kennedy et al . Fig. 6-7 and col. 14, lines 34-45); 
and 

presenting the alternative application data to a user 
for the user's consideration ( Kennedy et al . Fig. 6 and 
col. 8, lines 34-45) . 

As to Claim 18, Kennedy et al . as modified teaches a 
method of claim wherein the computer form is a password- 
changing form, and the retrieved application data comprise 
a user identification and a password ( Kennedy et al . Fig. 6 
and col. 8, lines 34-45) . 

As to Claim 22, Kennedy et al. discloses a 
computer program product, for managing meta data in the 
computing device, the computer program product comprising a 
computer readable storge medium having computer readable 
program code embodied in the medium, the computer readable 
program code comprising: 

computer readable program code configured to collect 
meta data resulting from use of the computing device, the 
metadata comprising application data usable in an 
application (storing into a profile data values entered on 
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a form on the basis of labels associated with fields on the 
form) (col- 3, lines 1-5) and a context data for identifying 
context in which the application data are used (col. 5, 
lines 43-53) . 

computer readable program code configured to store the 
meta data and the statistical information in a storage of 
the computing device (i.e. the profile, which is stored for 
future use) (see abstract) ; and 

computer readable program code configured to retrieve, 
from the storage (i.e. a previously stored data value is 
retrieved from the user profile) (col. 11, lines 10-13), 
application data that would be most appropriate for a 
current context of using the application based on the 
context data (fig. 5) and the statistical information (col. 
5, lines 30-34) . 

Kennedy et al. does not teach computer readable 
program code configured to determine statistical 
information associated with the meta data, the statistical 
information indicating relationships between the meta data. 

Kawasaki teaches computer readable program code 
configured to determine statistical information associated 
with the meta data, the statistical information indicating 
relationships between the meta data (i.e. collecting 
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representative data sets of major areas of interests and 
processing the data sets by algorithms and weighted rules 
to form a recognizer) (col. 3, lines 4-16). 

Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention 
was made to have modified Kennedy et al . wherein the 
computer readable program code configured to determine 
statistical information associated with the meta data, the 
statistical information indicating relationships between 
the meta data. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al. by the teaching of Kawasaki because 
providing the computer readable program code configured to 
determine statistical information associated with the meta 
data, the statistical information indicating relationships 
between the meta data allows reduced inaccurate, misleading 
or obsolete preferences, which may causing a mismatch 
between actual User interests and the information captured 
in manual preferences systems as taught by Kawasaki (col. 
2, lines 35-45) . 



As to Claim 23, Kennedy et al. as modified teaches a 
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computer program product further comprising computer 
executable instructions for: 

computer readable program code configured to apply the 
retrieved application data in the current context ( Kennedy 
et al . Fig. 2-3 and col. 5, lines 43-53). 

As to Claim 24, Kennedy et al. as modified teaches a 
computer program product wherein 

the context data identify at least one of the 
following: user roles, uniform resource identifiers (URls) , 
file names, and/or form names pertaining to the application 
data ( Kennedy et al. Fig. 2-3 and col. 5, lines 43-53). 

As to Claim 25, Kennedy et al . as modified teaches a 
computer program product wherein 

the application data comprise at least one of the 
following: page display setting data, file display setting 
data, user ID/password combinations, user's preference 
data, bookmarks, and authentication data (i.e. 
passwords) ( Kennedy et al . Fig. 6 and col. 8, lines 36-45) . 



As to Claim 26, Kennedy et al . as modified teaches a 
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computer program product wherein the authentication data 
comprise at least one of the following: 

certificates, or public keys (i.e. For additional 
security purposes, the values in data store 2 06 could be 
stored in encrypted form in a protected area in client 
computer) ( Kennedy et al . col. 7, lines 47-50) . 

As to Claim 27, Kennedy et al. as modified teaches a 
computer program product wherein 

the meta data are stored in (key, value) pairs (i.e. 
the values can be correlated or combined with data from 
other sources, such as values used by the profile 
assistant) ( Kennedy et al . col. 7, lines 50-55). 

As to Claim 28, Kennedy et al . as modified teaches a 
computer program product wherein 

the statistical information indicates frequencies in 
which particular application data are used together in 
particular contexts (i.e. frequency of encounter ) ( Kawasaki 
col. 3, lines 4-16) . 



As to Claim 30, Kennedy et al . as modified teaches a 
computer program product further comprising for 
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computer readable program code configured to update 
the computing device with meta data resulting from use of 
the computing device in the current context ( Kennedy et al . 
col- 6, lines 20-24) . 

As to Claim 31, Kennedy et al - as modified teaches a 
computer program product wherein the current context 
comprises at least one of the following: 

opening a web page, filling in a computer form, 
filling in a password- changing form, providing a 
certificate, opening a computer file, processing a computer 
file, or executing an application program ( Kennedy et al . 
Fig. 6 and col. 8, lines 36-45). 

As to Claim 32, Kennedy et al . as modified teaches a 
computer program product further comprising: 

computer readable program code configured to provide a 
graphical user interface (GUI) for allowing the user to 
organize the stored meta data ( Kennedy et al . Fig. 6 and 
col . 8 , lines 36-45) . 



As to Claim 33, Kennedy et al . as modified teaches a 
computer program product wherein 
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the GUI displays a graphical tool in a cylindrical 
configuration for organizing the stored meta data ( Kennedy 
et al. Fig. 6) . 

As to Claim 34, Kennedy et al . as modified teaches a 
computer program product wherein the computer readable 
program code configured to retrieve most appropriate meta data 
is implemented using heuristics algorithms (i.e. a 
heuristics function can also be provided) ( Kennedy et al. 
col. 7, lines 29-35) . 

As to Claim 35, Kennedy et al . as modified teaches a 
computer program product wherein the computer readable 
program code configured to retrieve the most appropriate 
meta data comprises: 

computer readable program code configured to formulate 
search requirements based on the current context of using 
the application (i.e. search) ( Kennedy et al . Fig. 6-7); and 

computer readable program code configured to execute a 
search based on the search requirements (i.e. 
search) ( Kennedy et al . Fig. 6-7) . 
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As to Claim 36, the teachings of Kennedy et al . as 
modified has been discussed above, Kennedy et al . as 
modified does not teach the search requirements specify 
weighted properties of the current context of using the 
application. 

Kawasaki teaches the search requirements specify 
weighted properties of the current context of using the 
application (i.e. collecting representative data sets of 
major areas of interests and processing the data sets by 
algorithms and weighted rules to form a recognizer) 
( Kawasaki col. 3, lines 4-16) 

As to Claim 37, Kennedy et al . as modified teaches a 
computer program product further comprising 

computer readable program code configured to apply the 
retrieved application data in the current context ( Kennedy 
et al . Fig. 6-7 and col. 8, lines 36-45); and 

computer readable program code configured to apply 
predetermined application data in the current context if no 
such most appropriate application data are retrieved 
( Kennedy et al. Fig. 6-7 and col. 8, lines 36-45) . 



As to Claim 38, Kennedy et al. as modified teaches a 
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computer program product wherein the current context is for 
filling in a computer form, and the computer program 
product comprises 

computer readable program code configured to 
automatically fill in the computer form with the most 
appropriate application data (i.e. Thus has been described 
a method and apparatus for automatically populating a form 
comprising a plurality of fields) ( Kennedy et al . Fig. 6-7 
and col. 14, lines 52-55). 

As to Claim 39, Kennedy et al . as modified teaches a 
computer program product further comprising: 

computer readable program code configured to retriev, 
from the storage, alternative application data that are 
related to the current context of filling in the computer 
form (i.e. the user has the option of entering information 
for other fields for which no match was found) ( Kennedy et 
al . Fig. 6-7 and col. 14, lines 34-45); and 

computer readable program code configured to present 
the alternative application data to a user for the user's 
consideration ( Kennedy et al. Fig. 6 and col. 8, lines 34- 
45) . 
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As to Claim 40, Kennedy et al. as modified teaches a 
computer program product wherein 

the computer form is a pas sword- changing form, and the 
retrieved application data comprise a user identification 
and a password ( Kennedy et al . Fig. 6 and col. 8, lines 34- 
45) . 

As to Claim 44, Kennedy et al. discloses a system- for 
managing meta data in a secure manner, the system 
comprising : 

a computing device capable of communicating with other 
communication devices through a communications network, the 
computing device comprising, a plurality of applications 
selectably executable on the computing device (Fig. 1 and 
2) , 

a security architecture for selectively providing 
security-based services to at least one of the plurality of 
applications (i.e. For additional security purposes, the 
values in data store 206 could be stored in encrypted form 
in a protected area in client computer) ( Kennedy et al . col. 
7, lines 45-47) , 

a data repository module, provided as an add- in module 
to the security architecture, for collecting meta data 
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resulting from use of the computing device (i.e. storing 
into a profile data values entered on a form on the basis 
of labels associated with fields on the form) ( Kennedy et 
al . col. 3, lines 1-5), 

the meta data comprising application data usable in an 
application and context data for identifying context in 
which the application data are used (i.e. the profile, 
which is stored for future use) (see abstract) , 

the statistical information indicating relationships 
between the meta data, storing the meta data and the 
statistical information in a storage of the computing 
device (i.e. the profile, which is stored for future 
use) (see abstract) , and 

retrieving, from the storage (i.e. a previously stored 
data value is retrieved from the user profile) (col. 11, 
lines 10-13), application data that would be most 
appropriate for a current context of using the application 
based on the context data (fig. 5) and the statistical 
information (col. 5, lines 30-34) . 

Kennedy et al. does not teach determining statistical 
information associated with the meta data, the statistical 
information indicating relationships between the meta data. 
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Kawasaki teaches determining statistical information 
associated with the meta data, the statistical information 
indicating relationships between the meta data (i.e. 
collecting representative data sets of major areas of 
interests and processing the data sets by algorithms and 
weighted rules to form a recognizer) (col. 3, lines 4-16). 

Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention 
was made 4 to have modified Kennedy et al . wherein the 
determining statistical information associated with the 
meta data, the statistical information indicating 
relationships between the meta data. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al . by the teaching of Kawasaki because 
providing the determining statistical information 
associated with the meta data, the statistical information 
indicating relationships between the meta data allows 
reduced inaccurate, misleading or obsolete preferences, 
which may causing a mismatch between actual User interests 
and the information captured in manual preferences systems 
as taught by Kawasaki (col. 2, lines 35-45). 
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As to Claim 45, Kennedy et al. as modified teaches a 
system wherein the data repository module comprises: 

the storage for storing the meta data ( Kennedy et al . 
col. 3, lines 1-5) ; 

a first interface for managing a process of storing 
the meta data in the storage ( Kennedy et al . col. 3, lines 
1-5) ; and 

a second interface for retrieving from the storage the 
most appropriate meta data for the current context ( Kennedy 
et al. Fig. 2-3 and col. 5, lines 43-53) . 

As to Claim 46, Kennedy et al. as modified teaches a 
system wherein 

the second interface formulates search requirements 
based on the current context of using the application, and 
executes a search based on the search requirements to 
retrieve the most appropriate metadata (fig. 5 and col. 5, 
lines 30-34) . 

retrieving, from the storage (i.e. a previously stored 

data 

value is retrieved from the user profile) (col. 11, 
lines 10-13), application data that would be most 
appropriate for a current context of using the application 
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based on the context data ( Kennedy et aL Fig, 6-7 and col, 
8, lines 36-45) and the statistical information ( Kennedy et 
al .col . 5, lines 30-34) and 



As to Claim 47, the teachings of Kennedy et al. as 
modified has been discussed above, Kennedy et al . as 
modified does not teach the search requirements specify 
weighted properties of the current context of using the 
application. 

Kawasaki teaches the search requirements specify 
weighted properties of the current context of using the 
application (i.e. collecting representative data sets of 
major areas of interests and processing the data sets by 
algorithms and weighted rules to form a recognizer) 
( Kawasaki col. 3, lines 4-16) 

As to Claim 48, Kennedy et al . as modified teaches a 
system wherein 

the context data include at least one of the 
following: user roles, uniform resource identifiers (URIs) , 
file names, or form names pertaining to the meta data 
( Kennedy et al . Fig. 2-3 and col. 5, lines 43-53). 
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As to Claim 49, Kennedy et al. as modified teaches a 
system wherein the metadata are stored in (key, value) 
pairs (i.e. the values can be correlated or combined with 
data from other sources, such as values used by the profile 
assistant) ( Kennedy et al . col. 7, lines 50-55) . 

As to Claim 51, Kennedy et al . as modified teaches a 
system wherein 

the meta data represent at least one of the following: 
web page settings, file display settings, user ID/password 
combinations, computer form data, user's preferences, book 
marks, and authentication data (i.e. passwords) ( Kennedy et 
al. Fig. 6 and col. 8, lines 36-45). 

As to Claim 52, Kennedy et al . as modified teaches a 
system wherein the authentication data comprise at least 
one of the following: 

certificates, or public keys (i.e. For additional 
security purposes, the values in data store 206 could be 
stored in encrypted form in a protected area in client 
computer) ( Kennedy et al . col. 7, lines 47-50). 



As to Claim 53, Kennedy et al . as modified teaches a 
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system wherein the current context comprises at least one 
of the following: 

opening a web page, filling in a computer form, 
filling in a password- changing form, providing a 
certificate, opening a computer file, processing a computer 
file, or executing an application program ( Kennedy et al. 
Fig. 6 and col. 8, lines 36-45) . 

As to Claim 54, Kennedy et al . as modified teaches a 
system further comprising: 

a meta data editor for providing a graphical user 
interface (GUI) that allows the user to organize the stored 
meta data ( Kennedy et al . Fig. 6 and col. 8, lines 36-45). 

As to Claim 55, Kennedy et al . as modified teaches a 
system wherein 

the GUI is a graphical tool in a cylindrical 
configuration ( Kennedy et al . Fig. 6) . 



4. Claims 8, 19-21, 29, 41-43 and 50, are rejected under 
35 U.S.C. 103(a) as being unpatentable over Kennedy et al. 
(U.S. Patent 6,651,217) in view of Kawasaki (U.S. Patent 
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6,539,375) further in view of Olden (U.S. Patent 
6,460, 141) . 

As to Claim 8, the teachings of Kennedy et al . as 
modified has been disclosed above, 

Kennedy et al . as modified does not teach implements a 
Common Data Security Architecture (CDSA) , and retrieving, 
from the storage, application data that would be most 
appropriate for a current context of using the application 
based on the context data and the statistical information 
is performed by a CDSA add-on module. 

Olden teaches implements a Common Data Security 
Architecture (CDSA) , and the retrieving step is performed 
by a 

CDSA add-on module (i.e. Resource Based Authentication 
Security services through GSSAPI and CDSA Encrypted SSO 
Java graphical user interface for Web security system LDAP 
integration) (col. 32, lines 23-25). 

Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention 
was made to have modified Kennedy et al. wherein the 
implementation is a Common Data Security Architecture 
(CDSA) , and the retrieving step is performed by a CDSA add- 
on module. 
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It would have been obvious to a person having ordinary- 
skill in the art at the time the invention was made to have 
modified Kennedy et al. by the teaching of Olden because 
providing implements a Common Data Security Architecture 
(CDSA) , and the retrieving step is performed by a CDSA add- 
on module allows an improved security and access control 
system as taught by Olden (col. 2, lines 8-12) . 

As to Claim 19, Kennedy et al . as modified teaches a 
system wherein automatically filling in the computer form 
with the most appropriate application data comprises: 

the teachings of Kennedy et al . as modified has been 
disclosed above, 

Kennedy et al. as modified does not teach presenting 
the password in the form in an obfuscated format; 
determining whether it is safe to present the actual 
password to a user; and presenting the actual password in a 
non-obfuscated format when it is determined to be safe to 
present the actual password. 

Olden teaches presenting the password in the form in 
an obfuscated format (Fig. 9 and 12 and col. 14, lines 22- 
28) ; 
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determining whether it is safe to present the actual 
password to a user (Fig. 9 and 12 and col. 14, lines 22- 
2 8); and 

presenting the actual password in a non-obfuscated 
format when it is determined to be safe to present the 
actual password. 

Olden teaches implements a presenting the password in 
the form in an obfuscated format ( Olden Fig. 9 and 12 and 
col. 14, lines 22-28) ; 

determining whether it is safe to present the actual 
password to a user (Fig. 9 and 12 and col. 14, lines 22- 
2 8); and 

presenting the actual password in a non-obfuscated 
format when it is determined to be safe to present the 
actual password. 

( Olden Fig. 9 and 12 and col. 14, lines 22-28). 

Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention 
was made to have modified Kennedy et al . wherein presenting 
the password in the form in an obfuscated format; 
determining whether it is safe to present the actual 
password to a user; and presenting the actual password in a 
non-obfuscated format when it is determined to be safe to 
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present the actual password allows an improved security and 
access control system as taught by Olden (col. 2, lines 8- 
12) . 

As to Claim 20, Kennedy et al . as modified teaches a 
method wherein 

determining whether it is safe to present the actual 
password to a user is performed based on input from the 
user ( Olden Fig. 9 and 12 and col. 14, lines 22-28). 

As to Claim 21, Kennedy et al . as modified teaches a 
method further comprising the step of: 

replacing the password stored in the storage with a 
new password if the new password has been accepted by a 
receiving party ( Olden Fig. 9 and 12 and col. 14, lines 22- 
28) . 

As to Claim 29, the teachings of Kennedy et al . as 
modified has been disclosed above, 

Kennedy et al . as modified does not teach implements a 
Common Data Security Architecture (CDSA) , and the 
retrieving step is performed by a CDSA add-on module. 
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Olden teaches implements a Common Data Security 
Architecture (CDSA) , and the retrieving step is performed 
by a CDSA add-on module (i.e. Resource Based Authentication 
Security services through GSSAPI and CDSA Encrypted SSO 
Java graphical user interface for Web security system LDAP 
integration) (col. 32, lines 23-25) . 

Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention 
was made to have modified Kennedy et al. wherein the 
implementation is a Common Data Security Architecture 
(CDSA) , and the retrieving step is performed by a CDSA add- 
on module . 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al . by the teaching of Olden because 
providing implements a Common Data Security Architecture 
(CDSA) , and the retrieving step is performed by a CDSA add- 
on module allows an improved security and access control 
system as taught by Olden (col. 2, lines 8-12) . 



As to Claim 41, the teachings of Kennedy et al. as 
modified has been disclosed above, 
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. Kennedy et al . as modified does not teach computer 
readable program code configured to present the password in 
the form in an obfuscated format; 

computer readable program code configured to determine 
whether it is safe to present the actual password to a 
user; and 

computer readable program code configured to present 
the actual password in a non-obfuscated format when it is 
determined to be safe to present the actual password. 

Olden teaches presenting the password in the form in 
an obfuscated format (Fig. 9 and 12 and col. 14, lines 22- 
28); 

computer readable program code configured to determine 
whether it is safe to present the actual password to a user 
(Fig. 9 and 12 and col. 14, lines 22-28); and 

computer readable program code configured to present 
the actual password in a non-obfuscated format when it is 
determined to be safe to present the actual password ( Olden 
Fig. 9 and 12 and col. 14, lines 22-28). 

Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention 
was made to have modified Kennedy et al. with computer 
readable program code configured to present the password in 
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the form in an obfuscated format; computer readable program 
code configured to determine whether it is safe to present 
the actual password to a user; and computer readable 
program code configured to present the actual password in a 
non-obfuscated format when it is determined to be safe to 
present the actual password allows an improved security and 
access control system as taught by Olden (col. 2, lines 8- 
12) . 

As to Claim 42, Kennedy et al . as modified teaches a 
computer program product wherein 

the computer executable instructions for determining 
whether, it is safe to present the actual password is 
executed based on input from the user ( Olden Fig. 9 and 12 
and col. 14, lines 22-28) . 

As to Claim 43, Kennedy et al . as modified teaches a 
computer program product further comprising: 

computer readable program code configured to replace 
the password stored in the storage with a new password if 
the new password has been accepted by a receiving party 
( Olden Fig. 9 and 12 and col. 14, lines 22-28) . 
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As to Claim 50, the teachings of Kennedy et al . as 
modified has been disclosed above, 

Kennedy et al . as modified does not teach implements a 
Common Data Security Architecture (CDSA) , and the 
retrieving step is performed by a CDSA add-on module. 

Olden teaches implements a Common Data Security 
Architecture (CDSA) , and the retrieving step is performed 
by a CDSA add-on module (i.e. Resource Based Authentication 
Security services through GSSAPI and CDSA Encrypted SSO 
Java graphical user interface for Web security system LDAP 
integration) (col. 32, lines 23-25). 

Therefore, it would have been obvious to a person 
having ordinary skill in the art at the time the invention 
was made to have modified Kennedy et al . wherein the 
implementation is a Common Data Security Architecture 
(CDSA) , and the retrieving step is performed by a CDSA add- 
on module. 

It would have been obvious to a person having ordinary 
skill in the art at the time the invention was made to have 
modified Kennedy et al. by the teaching of Olden because 
providing implements a Common Data Security Architecture 
(CDSA) , and the retrieving step is performed by a CDSA add- 
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on module allows an improved security and access control 
system as taught by Olden (col. 2, lines 8-12). 
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Response to Argument 

8. Applicant's arguments submitted on 1-13-2 005 with 
respect to claims 1-55 have been reconsidered but are not 
deemed persuasive for the reasons set forth below. 

9. Examiner has completed a through study of Applicant's 
amendment of January 13, 2005. Especially, Applicant's 
amendments to claims 1-55 and remarks at pages 13-18 of the 
Amendment of 1-13-2005 has been carefully studied and 
reviewed. 

10. Examiner has carefully and thoroughly studied and 
reviewed Applicant's amendment of 1-13-2005. Examiner 
asserts that ( Kennedy et al . in combination with Kawasaki 
further in combination with Olden teaches Applicant 1 s 
claimed invention of managing meta data in a computing 
device . 

In addition, the specially discussed feature of the 
claimed invention ("a context data for identifying context 
in which the application data are used ") is very clearly 
discussed in ( Kennedy et al. col. 5, lines 43-53). 
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In addition, the specially discussed feature of the 
claimed invention ("retrieving, from the storage, 
application data that would be most appropriate for a 
current context of using the application based on the 
context data and the statistical information") is very 
clearly discussed in ( Kennedy et al . col. 11, lines 10-13 
and col. 5, lines 30-53 and fig 5). 

In addition, the specially discussed feature of the 
claimed invention ("determining statistical information 
associated with the meta data, the statistical information 
indicating relationships between the meta data") is very 
clearly discussed in (i.e. collecting representative data 
sets of major areas of interests and processing the data 
sets by algorithms and weighted rules to form a recognizer. 
Kwasaki col. 3, lines 4-16) . 

11. Applicant is inaccurate for the reasons explicitly 
stated in the first Office Action. 

12 . These reasons have been explicitly stated in the first 
Office Action. Please see the next section. 
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Conclusion 

13. THIS ACTION IS MADE FINAL , Applicant is reminded of 
the extension of time policy as set forth in 37 CFR 
1.136 (a) . 

A shortened statutory- period for reply to this final 
action is set to expire THREE MONTHS from the mailing date 
of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the 
advisory action is not mailed until after the end of the 
THREE-MONTH shortened statutory period, then the shortened 
statutory period will expire on the date the advisory 
action is mailed, and any extension fee pursuant to 37 CFR 
1.136 (a) will be calculated from the mailing date of the 
advisory action. In no event, however, will the statutory 
period for reply-expire later than SIX MONTHS from the 
mailing date of this final action. 
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Points of contact 

14. Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to 
Yicun Wu whose telephone number is 703-305-4889. The 
examiner can normally be reached on 8:00 am to 4:30 pm, 
Monday -Friday. 

If attempts to reach the examiner by telephone are 
unsuccessful, the examiner's supervisor, Dov Popovici can 
be reached on 703-305-3830. The fax phone numbers for the 
organization where this application or proceeding is 
assigned are 703-872-9306 for regular communications and 
703-746-7240 for After Final communications. 

Any inquiry of a general nature or relating to the 
status of this application or proceeding should be directed 
to the receptionist whose telephone number is 703-305-3900. 




Yicun Wu CHARLES RONES 

Patent Examiner PRIMARY EXAMINER 

Technology Center 2100 



May 6, 2005 



